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^ Flexible control of d ow nloaded executaMe„c^^^ 
^ Trent Jaeger, AtuI Prakash, Jochen Liedtke, Nayeem Islam 
^ May 1999 ACM Transactions on Information s^nri fCvcti 



ACM Transactions on Information and System Security (TISSEC), volume 2 

Issue 2 
Publisher: ACM Press 

Full text available: ff l pdf(297.79 KB) Additional Information; full ci tation , abstr ac t, refe rences , citing s, index 
^ terms, re view 

We present a security architecture that enables system and application a ccess control 
requirements to be enforced on applications composed from downloaded executable 
content. Downloaded executable content consists of messages downloaded from remote 
hosts that contain executables that run, upon receipt, on the downloading principal's 
machine. Unless restricted, this content can perform malicious actions, including 
accessing its downloading principal's private data and sending messages on th ... 



Keywords: access control models, authentication, autorization machanisms, collaborative 
systems, role-based access control 



Fast detection of communication patterns in distnbuted executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 
Studies on Collaborative research CASCON '97 

Publisher: IBM Press 

Full text available: ^pM{±21M31 Additional Information: full citation, abstract, references, in d ex ter m s 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

Application perf or m a n ce and flexibility on e xokernel systems 

M. Frans Kaashoek, Dawson R, Engler, Gregory R. Ganger, Hector M. Briceno, Russell Hunt, 
David Mazieres, Thomas Pinckney, Robert Grimm, John Jannotti, Kenneth Mackenzie 
October 1997 ACM SIGOPS Operating Systems Review , Proceedings of the sixteenth 
ACM symposium on Operating systems principles SOSP '97, volume 3i issue 



http://portal.acm.org/results.cfm?CFID=40431924&CFTOKEN=16796205&adv=l&COLL... 10/25/07 



Results (page 1): +download +driver +server +library secure restricted 



Page 2 of 6 



5 

Publisher: ACM Press 

Full text available: g pdf(2.39 MB) Additional Information: full citation, references, citings, i ndex term s 



The performance of u-kernel-based systems 

Hermann Hartig, Michael Hohmuth, Jochen Liedtke, Sebastian Schonberg, Jean Wolter 
October 1997 ACM SIGOPS Operating Systems Review , Proceedings of the sixteenth 
ACM symposium on Operating systems principles SOSP '97, volume 3i issue 

5 

Publisher: ACM Press 

Full text available: §..p.df(2,g2„.M Additional Information: ful l c itation, re ferences, citings, inde x te r ms 



^ Secur e an d po rtable datab ase extensibility 
^ Michael Godfrey, Tobias Mayr, Praveen Seshadri, Thorsten von Eicken 

^ June 1998 ACM SIGMOD Record , Proceedings of the 1998 ACM SIGMOD international 
conference on Management of data SIGMOD "98, Volume 27 issue 2 
Publisher: ACM Press 

Full text available* 1f1 pdf(1 60 MB) Additional Information: full citation , abstract , references , citings, index 
terms 

The functionality of extensible database servers can be augnnented by user-defined 
functions (UDFs). However, the server's security and stability are concerns whenever new 
code is incorporated. Recently, there has been interest in the use of Java for database 
extensibility. This raises several questions: Does Java solve the security problems? How 
does it affect efficiency? We explore the tradeoffs involved in extending the PREDATOR 
object-relational database server using Java. We ... 

^ ysjng C Q R BA a nd JDBC to produce three ti er s yste ms 
Barry Cornelius 

April 1998 ACM SIGPLAN Notices, volume 33 issue 4 
Publisher: ACM Press 

Full text available: "gl pdf(748.48 KB) Additional Information: full citation , index terms 



7 PELLPACK: a_problem-$olving environment for PDE-based applications on 
^ multicomputer platforms 

^ E. N. Houstis, J. R, Rice, S. Weerawarana, A. C. Catlin, P. Papachiou, K.-Y. Wang, M. 
Gaitatzes 

March 1998 ACM Transactions on Mathematical Software (TOMS), Volume 24 Issue 1 
Publisher: ACM Press 

Full text available- fS!) pdf(26 30 MB) Additional Information: full citation , abstract , references , citing s, index 
" terms , review 

The article presents the software architecture and implennentation of the problem-solving 
environment (PSE) PELLPACK for modeling physical objects described by partial 
differential equations (PDEs). The scope of this PSE is broad, as PELLPACK incorporates 
many PDE solving systems, and some of these, in turn, include several specific PDE 
solving methods. Its coverage for ID, 2D. and 3D elliptic or parabolic problems is quite 
broad, and it handles some hyperbolic problems, Since a PSE should p ... 

Keywords: PDE language, execution models, knowledge bases, libraries, parallel reuse 
methodologies, problem-solving environments, programming-in-the-large, sofeware bus 
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^ Design and implem^^ of a distributed virtual machin e for networ ked c om puters Q 

^ Emin Gun Sirer, Robert Grimm, Arthur J. Gregory, Brian N. Bershad 

December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 
'99, Volume 33 Issue 5 
Publisher: ACM Press 

Full text available- W\ pdf(1.62 MB) Additional Information: full citation, abstract, references, citings, index 

terms 

This paper describes the motivation, architecture and performance of a distributed virtual 
machine (DVM) for networked computers. DVMs rely on a distributed service architecture 
to meet the manageability, security and uniformity requirements of large, heterogeneous 
clusters of networked computers. In a DVM, system services, such as verification, security 
enforcement, compilation and optimization, are factored out of clients and located on 
powerful network servers. This partitioning of system fun ... 

9 UFO: a personal g lo b a l file system based on user- le vel ext e n s ion s t o th e o perating Q 
^ system 

Albert D. Alexandrov, Maximilian Ibel, Klaus E. Schauser, Chris J. Scheiman 
August 1998 ACM Transactions on Computer Systems (TOCS), volume i6 issue 3 
Publisher: ACM Press 

Full text available- pdf(251 25 KB) Additional Information: full cit atio n, ab str act, r e f erences , citings, ind ex 

terms, r e v iew 

In this article we show how to extend a wide range of functionality of standard operation 
systems completely at the user level. Our approach works by intercepting selected system 
calls at the user level, using tracing facilities such as the /proc file system provided by 
many Unix operating systems. The behavior of some intercepted system calls is then 
modified to implement new functionality. This approach does not require any relinking or 
recompilation of existing applications. In fact, the ... 

Keywords: file caching, global name space, proc file system, user-level operating system 
extensions 



"■o Kernel Korner 
Joseph Pranevich 
April 1999 Linux Journal 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: g] html(18J6 KB) Additional Information: full citation, abstract, in.dex.Mrms 

Linux 2.2 and the Frame-Buffer Console: Wondering about the new frame-buffer features 
in the kernel? Mr. Pranevich gives us the scoop 

Distributed op erating systems 
^ Andrew S. Tanenbaum, Robbert Van Renesse 
>^ Decennber 1985 ACM Computing Surveys (CSUR), volume 17 issue 4 

Publisher: ACM Press 

Full text available' 113 pdf(5.49 MB) Additional Information: fu ll ci ta ti o n, abstract, refer e nc es , citings, inde x 

terms, review 

Distributed operating systems have many aspects in common with centralized ones, but 
they also differ In certain ways. This paper is intended as an introduction to distributed 
operating systems, and especially to current university research about them. After a 
discussion of what constitutes a distributed operating system and how it Is distinguished 
from a computer network, various key design issues are discussed. Then several 
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''^ Pen computing: a te c hn ology overview and a vision 
Andre Meyer 

V July 1995 ACM SIGCHI Bulletin, volume 27 issue 3 
Publisher: ACM Press 

Full text available: ^pdf (5.14 MB ) Additional Information: full citation , abstract , c i tin gs. Index terms 

This work gives an overview of a new technology that is attracting growing interest in 
public as well as in the computer industry itself. The visible difference from other 
technologies is in the use of a pen or pencil as the primary means of interaction between 
a user and a machine, picking up the familiar pen and paper interface metaphor. From 
this follows a set of consequences that will be analyzed and put into context with other 
emerging technologies and visions. Starting with a short historic ... 

13 Session 5: System customization: The operating systenn kernel as a secure 
^ progra mm abl e mach i n e 

^ Dawson Engler, M. Frans Kaashoek, James O'Toole 

September 1994 Proceedings of the 6th workshop on ACM SIGOPS European 

workshop: Matching operating systems to application needs EW 6 

Publisher: ACM Press 

Full text available: gpdf(551.85 KB) Additional Information: full citation , abstract , references , citings 

Operating systems should provide only minimal embedded kernel functionality. 
Exokernels achieve this minimalist goal by presenting to applications the features 
supported by the underlying hardware resources. Applications customize the operating 
system by extending the exokernel interface. Code inspection, inlined cross-domain 
procedure calls, and secure languages are used to allow programmable yet safe additions 
to the supervisor-mode execution environment. These additions enable applicat ... 

''^ A f r a me w ork f o r the ass essment of operating s ys tems for small computers 
Hossein Saiedian, Munib Siddiqi 
April 1996 ACM SIGICE Bulletin, Volume 21 issue 4 
Publisher: ACM Press 

Full text available: ^ pdfd.SQ M B) Additional Information: full cita tion, ab str act , ref e re nc es, index terms 

A number of high performance operating systems are now available for small computers 
on different hardware platforms. These operating systems offer many advanced features 
formerly reserved for their workstation and minicomputer counterparts. This article 
surveys the most widely used of such operating systems, namely OS/2, Windows NT, 
Linux and Macintosh System 7.5. It provides an account on the history, design objectives 
and evolution of these operating systems and discusses their key features, ... 

Keywords: CP/M, DOS, Linux, Macintosh, Microcomputers, OS/2, Operating Systems, 
Small Computer Systems, Windows, Windows NT 



Is your com puting environm ent secu r e?: sec u rity prob l ems with interrupt handlin g 
mechan i sms 

Ping Hu, Bruce Christiansen 

October 1995 ACM SIGOPS Operating Systems Review, Volume 29 Issue 4 
Publisher: ACM Press 

Full text available: ^ pdf(764.10 KB) Additional Information: full citation , abstract , index terms 

In an open distributed system, resources must be shared among various users. Security is 
one of the major issues in designing such a system. When a computer system is 
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connected to a network, it is very important to ensure tliat the computer has the ability to 
manage its local resources securely. In this position paper, we will demonstrate that 
current computer architectures do give malicious users ways to penetrate computer 
systems and hence access the system or other user's secrets which are sup ... 

Experiences with the Amoeba distributed operating system 
^ Andrew S. Tanenbaum, Robbert van Renesse, Hans van Staveren, Gregory J. Sharp, Sape J. 
^ Mullender 

December 1990 Communications of the ACM, volume 33 issue 12 
Publisher: ACM Press 

Full text available: 111 pdf(2.71 MB) Additional Information: full d^^^^ abstract, ref erence s, c itin gs, index 

terms, r e v i ew 

The Amoeba project is a research effort aimed at understanding how to connect multiple 
computers In a seamless way [16, 17, 26, 27, 31]. The basic idea is to provide the users 
with the illusion of a single powerful timesharing system, when, in fact, the system is 
implemented on a collection of machines, potentially distributed among several countries. 
This research has led to the design and implementation of the Amoeba distributed 
operating system, which is being used as a prototype and veh ... 

A framework f or c ollaborative and distributed wgh^^ | 
^ Gangadhar Konduri, Anantha Chandrakasan 

June 1999 Proceedings of the 36th ACM/IEEE conference on Design automation DAC 
'99 

Publisher: ACM Press 

Full text available: ^.pdJ(lMMB) Additional Information: full c itation, references, dtings;. index te rms 



SCONEj^usina^^^ programming 
^ Jun-ichiro Itoh, Yasuhiko Yokote, Mario Tokoro 

October 1995 ACM SIGPLAN Notices , Proceedings of the tenth annual conference on 
Object-oriented programming systems, languages, and applications 

OOPSLA '95, Volume 30 issue 10 
Publisher: ACM Press 

Full text available: 11 1 pdfH .66 MB) Additional Information: Ml citation, a b stra c t, references, c iti n gs, index 

t er ms 

This paper proposes a methodology for nnaking low-level systenn code of operating 
systenns be replaceable at runtime. Our approach is to use concurrent objects as a basic 
programming unit for low-level system programs. To realize the different need for each 
type of system code and to execute these concurrent objects sufficiently efficient, we use 
a combination of dedicated system service layers and other implementation techniques. 
System service layers provide the most suitable primitive operations ... 

Operating sy st em su pport for hjgh-s 
^ Peter Druschel 

^ Septennber 1996 Communications of the ACI^, Volume 39 issue 9 
Publisher: ACM Press 

Full text available: ffl pdf(31 3,01 KB) ^^^'^'O^^' Information: full citation , references , citings , index terms . 
review 



Illustrative r^^^ technology Q 

Peter G. Neumann 

January 1996 ACM SIGSOFT Software Engineering Notes, volume 21 issue 1 
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